> For the complete documentation index, see [llms.txt](https://developers.gallabox.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developers.gallabox.com/getting-started/authentication.md).

# Authentication

The Gallabox API employs a combination of API Key and API Secret for authenticating requests.

Access and control your API credentials through the [Settings](https://app.gallabox.com/apikey) section of your Gallabox account. When generating API Keys, specify the required permissions to restrict access to essential API resources only.

Authenticate your API requests by including the API Key and API Secret in the `apiKey` and `apiSecret` headers, respectively, of each request.

{% hint style="info" %}
Please be sure to keep your API credentials secure! Do not share them in emails, chat messages, client-side code or publicly accessible sites.

If you have accidentally shared an API Key or Secret publicly, you can revoke it in the [Settings](https://app.gallabox.dev/apikey) of your Gallabox account by deleting it.
{% endhint %}